<div dir="ltr"><div>Hi guys</div><div><br></div><div>I want to do a quick test against AD FS by getting a Shibboleth SP to send a signed authnrequest with a signature using the sigalg <a href="http://www.w3.org/2000/09/xmldsig#dsa-sha1">http://www.w3.org/2000/09/xmldsig#dsa-sha1</a>.</div>
<div><br></div><div>I've tested as per <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPRelyingParty">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPRelyingParty</a> by adding a <font face="Courier New">signingAlg</font> ="<a href="http://www.w3.org/2000/09/xmldsig#dsa-sha1">http://www.w3.org/2000/09/xmldsig#dsa-sha1</a>" in the <relyingparty> and <ApplicationOverride> elements. This however now doesn't send a signed request at all. I just have signing="true" in both of them.</div>
<div><br></div><div>But if I change it to <a href="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256">http://www.w3.org/2001/04/xmldsig-more#rsa-sha256</a> instead it works and uses that sigalg.</div><div><br></div><div>So I am not sure if there is something else I have to do here. I had a quick scan of the logs but didn't see any clues. I thought it might be deemed work and filtered out but I couldn't see any evidence for that.</div>
<div><br></div><div>I am running Shib SP 2.5.3 on Windows Server 2008 R2. This was installed from an MSI.</div><div><br></div><div>Cheers</div><div><br></div><div>M</div></div>